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Abstract — A discrete memoryless generalized multiple access 
channel (GMAC) with confidential messages is studied, where two 
users attempt to transmit common information to a destination 
and each user also has private (confidential) information intended 
for the destination. This channel generalizes the multiple access 
channel (MAC) in that the two users also receive channel outputs. 
It is assumed that each user views the other user as a wire- 
tapper, and wishes to keep its confidential information as secret 
as possible from the other user. The level of secrecy of the 
confidential information is measured by the equivocation rate. 
The performance measure of interest is the rate-equivocation 
tuple that includes the common rate, two private rates and 
two equivocation rates as components. The set that includes all 
achievable rate-equivocation tuples is referred to as the capacity- 
equivocation region. For the GMAC with one confidential mes- 
sage set, where only one user (user 1) has private (confidential) 
information for the destination, inner and outer bounds on 
the capacity-equivocation region are derived. The outer bound 
provides a tight converse to the secrecy capacity region, which 
is the set of all achievable rates with user 2 being perfectly 
ignorant of confidential messages of user 1, thus establishing 
the secrecy capacity region. Furthermore, the degraded GMAC 
with one confidential message set is further studied, and the 
capacity-equivocation region and the secrecy capacity region are 
established. For the GMAC with two confidential message sets, 
where both users have confidential messages for the destination, 
an inner bound on the capacity-equivocation region is obtained. 
The secrecy rate region is derived, where each user's confidential 
information is perfectly hidden from the other user. 

I. Introduction 

Two important issues in communications are reliability and 
security. The reliability quantifies the maximum achievable 
rate (capacity) with small probability of error, and has been 
studied intensively since Shannon theory was established [1]. 
Security is an important issue when the transmitted informa- 
tion is confidential and needs to be kept as secret as possible 
from wire-tappers or eavesdroppers. The level of secrecy of 
confidential information at a wire-tapper can be measured by 
the equivocation rate, i.e., the entropy rate of confidential 
messages conditioned on channel outputs at the wire-tapper. If 
both reliability and security are considered, the performance 
measure of interest is the rate-equivocation tuple that includes 
both the communication rates and the equivocation rates 
(achieved at wire-tappers) as components. We refer to the set 
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that consists of all achievable rate-equivocation tuples as the 
capacity-equivocation region. 

Communication of confidential messages has been studied 
in the literature for some classes of channels. The wire-tap 
channel was introduced by Wyner in [2], where a sender 
wishes to transmit information to a legitimate receiver and to 
keep a wire-tapper as ignorant of this information as possible. 
The channel from the sender to the legitimate receiver and the 
wire-tapper was assumed to be a degraded broadcast channel. 
The trade-off between the communication rate to the legitimate 
receiver and the level of ignorance at the wire-tapper was 
developed. 

The broadcast channel with confidential messages was stud- 
ied in [3] as a generalization of the wire-tap channel, where 
the sender also wishes to transmit common information to 
both the legitimate receiver and the wire-tapper in addition to 
the private (confidential) information to the legitimate receiver. 
Moreover, the broadcast channel from the sender to the two 
receivers was assumed to be general and may not be degraded. 
The capacity-equivocation region was established for this 
channel, and the secrecy capacity region was given. The relay 
channel with confidential messages was studied in [4], where 
the relay node acts as both a helper and a wire-tapper. 

In this paper, we consider a two-user generalized multiple 
access channel (GMAC) with confidential messages, which 
generalizes the multiple access channel (MAC) [5, Sec. 14.3] 
by allowing both users to receive noisy channel outputs. 
This channel model is motivated by wireless communications, 
where transmitted signals are broadcast over open media and 
can be received by all nodes within communication range. For 
this channel, we assume that users 1 and 2 have common infor- 
mation and each user has its private (confidential) information 
intended for a destination. Since two users also receive channel 
outputs, they may extract each other's confidential information 
from their received channel outputs. However, each user treats 
the other user as a wire-tapper, and wishes to keep this wire- 
tapper as ignorant of its confidential message as possible. The 
level of ignorance of one user's confidential message at the 
other user (wire-tapper) is measured by the equivocation rate. 
Our goal is to study the capacity-equivocation region of the 
GMAC with confidential messages. 

We first study the GMAC with one confidential message set, 
where two users have common information for the destination 
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and only one user (user 1) has private (confidential) informa- 
tion for the destination. For this case, we obtain inner and outer 
bounds on the capacity-equivocation region. The two bounds 
match partially and determine the capacity-equivocation re- 
gion partially. Furthermore, the outer bound provides a tight 
converse to the secrecy capacity region, which is the set of 
all achievable rates with user 2 being perfectly ignorant of 
confidential messages of user 1, and we hence establish the 
secrecy capacity region. We also study the degraded GMAC 
with one confidential message set, where outputs at user 2 
are degraded versions of outputs at the destination. For this 
channel, we show a tight converse and establish the capacity- 
equivocation region and the secrecy capacity region. 

We further study the general case of the GMAC with two 
confidential message sets, where both users have confidential 
messages for the destination in addition to common messages. 
We obtain an achievable rate-equivocation region (inner bound 
on the capacity-equivocation region). We demonstrate a trade- 
off between the two equivocation rates corresponding to the 
two sets of confidential messages sent by user 1 and user 2. 
Based on the rate-equivocation region, we derive the secrecy 
rate region, where confidential messages of each user are 
perfectly secret from the other user. 

In this paper, we use x 11 to indicate the vector [x\, . . . , x n ), 
and use to indicate the vector (xi, . . . ,x n ). 

The organization of this paper is as follows. In SectionlH] we 
introduce the channel model of the GMAC with confidential 
messages. In Section[ffi] we present our results for the GMAC 
with one confidential message set. In Section IIVI we present 
our results for the degraded GMAC with one confidential 
message set. In Section [V] we present our results for the 
general case of the GMAC with two confidential message sets. 
In the final section, we give concluding remarks. We omit the 
proofs due to space limitations. The details can be found in 
[6]. 

II. Channel Model 

In this section, we first define the GMAC, and then define 
the performance measure of interest for the GMAC with 
confidential messages. 

Definition 1: A discrete memoryless GMAC consists of 
two finite channel input alphabets X\ and X 2 , three finite 
channel output alphabets y, y± and y 2 , and a transition 
probability distribution p(y,yi,y 2 \xi,x 2 ) ( see Fig- ID* where 
x\ G X\ and X2 G X2 are channel inputs from users 1 and 
2, respectively, and y G y, yx G y± and y 2 G y 2 are channel 
outputs at the destination, user 1 and user 2, respectively. 

Definition 2: A (2 nRo , 2 nRl , 2 nR * , n) code for the GMAC 
consists of the following: 

• Three message sets: W = {1,2, . . . ,2 nR °}, Wi = 
{l,2,...,2" fll } and W 2 = {1,2, . . . ,2 nR2 }. The com- 
mon message Wo and private messages W\ and W2 are 
independent and uniformly distributed over the message 
sets Wo,Wi and W2, respectively. 

• Two (stochastic) encoders, one at user 1: Wo x Wi — > 
X™, which maps each message pair (wq, w\) G Wo x Wi 



y: - 



w 1 
w, 



EiKKkr2 




X" 



Encoder! 



GMAC 



p(y,y,,y 2 \x u x 2 ) 



Daixkr 



Fig. 1. Generalized multiple access channel 



to a codeword x" G X"; the other at user 2: Wo x W2 — ► 
X 2 , which maps each message pair (wq, W2) G Wo x W2 
to a codeword x 2 l G X^\ 

• One decoder at the destination: y n — > Wo X Wi x W2, 
which maps a received sequence y n to a message tuple 
(wq, Wi,w 2 ) G W x Wi x W 2 . 
Note that in the GMAC although users 1 and 2 can receive 
channel outputs (see Fig. 0, they are only passive listeners 
in that their encoding functions are not affected by these 
received outputs. However, since outputs at each user contain 
the other user's private (confidential) information, each user 
may extract the other user's private (confidential) information 
from its outputs. We assume that each user treats the other 
user as a wire-tapper, and wishes to keep the other user as 
ignorant of its private (confidential) messages as possible. We 
hence define the following two equivocation rates: 



at user 2: -H(Wi\Y?,X$, W ,W 2 ) 
n 

at user 1: -H{W 2 \Y 1 n , X?, W , Wi) 



(1) 



which indicate the level of ignorance of the confidential 
message W\ at user 2 and the level of ignorance of the 
confidential message W 2 at user 1, respectively. Note that the 
larger the equivocation rate, the higher the level of secrecy. 

For the GMAC with confidential messages, a rate- 
equivocation tuple (i? , Ri, R 2 , Ri ye , R 2 ,e) is achievable if 
there exists a sequence of (2 nR ° , 2 nRl , 2" J?2 , nj codes with 



the average error probability P, 



(») 



as n goes to infinity 



(2) 



and with the equivocation rates Ri_ e and R 2 . e satisfying 
lim -H{W 1 \Y 2 n ,X 2 l ,Wo,W 2 )>Rie 
lim -HiW^Y^X^W^Wx) > R 2 , e . 

n — >oc ji 

Note that the rate-equivocation tuple (Ro, Ri, R 2 , i?i, e , R 2 , e ) 
includes both the reliable communication rates and the equiv- 
ocation rates, and it indicates the common and private rates 
(Ro,Ri,R 2 ) achieved at certain levels of communication 
secrecy (R\ te ,R 2 ,e) ■ 

The capacity-equivocation region, denoted by < £, is the clo- 
sure of the set that consists of all achievable rate-equivocation 
tuples (Rq, Ri, R 2 , i?i je , R 2 ,e)- Our goal is to study the 
capacity-equivocation region of the GMAC with confidential 
messages. 
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III. GMAC with One Confidential Message Set 

In this section, we study the GMAC with one confidential 
message set, where user 2 has only common messages and 
does not have confidential messages for the destination. This 
model generalizes the MAC with degraded message sets 
studied in [7] to consider the private messages sent from user 
1 to be confidential, i.e., needing to be as secret as possible 
from user 2. This model is also a counterpart of the broadcast 
channel with confidential messages studied in [3]. 

For the GMAC with one confidential message set, the rate 
R 2 = 0, and the equivocation rate i?2,e is not of interest. 
Hence channel outputs at user 1 do not play roles in the 
analysis. For notational convenience, we use R e to indicate 
Ri e in this case. Now the rate-equivocation tuple becomes 
(Ro, Ri,Re)\ i-e., it contains three components. The following 
two theorems provide inner and outer bounds on the capacity- 
equivocation region ^ of the GMAC in this situation. 

Theorem 1: The following convexified region is an inner 
bound on the capacity-equivocation region c € 1 for the GMAC 
with one confidential message set: 

M 1 = Convex (J 

p(q, x 2 )p(u\q)p(xi \u)p(y, y 2 \xi,x 2 ) 
(R , R\, R e ) : 
Ro > 0, Ri > 0, 
R 1 < I(U;Y\X 2 ,Q), 
Ra + Ri<I(U,X 2 ,Q;Y), 
0<R e < R u 

R e < [I(U;Y\X 2 ,Q) - I(U;Y 2 \X 2 ,Q)] + , 
Re < [I(U,X 2 ,Q;Y) - Ra - I(U;Y 2 \X 2 ,Q)} + 

where the function [x] + = x if x > and [x] + = if x < 
0. The auxiliary random variables Q and U are bounded in 
cardinality by \Q\ < \Xi\ • \X 2 \ + 3 and \U\ < \Xi\ 2 ■ \X 2 \ 2 + 
A\Xi\-\X 2 \+3, respectively. 

Remark 1: The last bound in Q indicates that there is 
a trade-off between the common rate and the secrecy level 
of confidential messages. As common rate R increases, the 
secrecy level of confidential messages may get lower. 

Remark 2: The rate-equivocation region Q reduces to the 
capacity region of the MAC with degraded message sets given 
in [7] by setting U = X\ and R e = 0. 

Theorem 2: The following region is an outer bound on 
the capacity-equivocation region C € I of the GMAC with one 
confidential message set: 



(3) 



u 



P(q, x 2 )p(u\q)p(x 1 \u)p(v\q)p(y, y 2 \xi,x 2 ) 

(Ro, Ri,R e ) ■ 

Ra > 0, Ri > 0, 

R 1 < I(U;Y\X 2 ,V), 

Ro + Ri<I(U,X 2 ,Q;Y), 

< Re < Rl, 

R e < I{U;Y\X 2 ,Q) - I{U;Y 2 \X 2 ,Q), 

Ro + R e < I(U,X 2 ,Q;Y) - I(U;Y 2 \X 2 ,Q) 
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Remark 3: The last four bounds in the outer bound @ 
match the last four bounds in the inner bound Q, and hence 
these four common bounds partially determine the boundary 
of the capacity-equivocation region c € 1 . 

We now study the case where perfect secrecy is achieved, 
i.e., user 2 does not get any information about confidential 
messages that user 1 sends to the destination. This happens if 
Re = Ri- 

Definition 3: The secrecy capacity region C\ is the region 
that includes all achievable rate pairs (i? , R\) such that R e = 
Ri, i.e., 

Ci = {{Ra,R x ) : (R 0l Ru Ri) e tf 1 }. (5) 
Definition 4: For a given rate Rq, the secrecy capacity 
C s (Ro) is the maximum achievable rate R\ with confidential 
messages perfectly hidden from user 2, i.e., 

C!(R ) = max R 1 . (6) 
(fl ,fli)ee„' 

Although the outer bound (0} given in Theorem |3 provides 
only a partial converse to the capacity-equivocation region, it 
is sufficiently tight to serve as the converse to the secrecy 
capacity region and secrecy capacity (as a function of the 
common rate Rq). 

Theorem 3: For the GMAC with one confidential message 
set, the following region is the secrecy capacity region: 

c[= U 

p(q, x 2 )p(u\q)p(x 1 \u)p(y, y 2 \xx,x 2 ) 

(Ro, Ri) ■ 
Ro > 0, Ri > 0, 

Ri <I(U; Y\X 2 ,Q)-I(U; Y 2 \X 2 ,Q), 
. Ro + Ri <I(U, X 2 , Q;Y) -I(U; Y 2 \X 2 ,Q) 

The secrecy capacity for a given rate Rq is given by 

Ci(R ) =maxmin{I(U;Y\X 2 ,Q) - I(U;Y 2 \X 2 ,Q), 

I(U, X 2 , Q] Y) - I(U- Y 2 \X 2 ,Q) - Ro} 

where the maximum is taken over all joint distributions 
p(q,x 2 )p(u\q)p(xi\u)p(y,y 2 \xi,x 2 ). In both and the 
auxiliary random variables Q and U are bounded in cardinality 

by |Q| < | Xi | -\X 2 1 +3 and \U\ < \Xi\ 2 -\X 2 \ 2 +A\Xi\-\X 2 \+3, 
respectively. 

Remark 4: If we let R a = and X 2 := <f>, the GMAC 
with one confidential message set reduces to the case of a 
broadcast channel with confidential messages studied in [3] 
with the common rate being zero. For this channel, the secrecy 
capacity in l|8} reduces to 

C\ = max[I([/; Y) - I(U; Y 2 )\ (9) 



(7) 



(8) 



where the max is taken over all joint distribution 
p(u, Xi)p(y, y 2 \xi). This is the same as the secrecy capacity 
given in Corollary 2 in [3]. 

IV. Degraded GMAC with One Confidential 
Message Set 

In this section, we study the degraded GMAC with one con- 
fidential message set, which generalizes the wire-tap channel 
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studied in [2] to allow user 1 and user 2 (wire-tapper) to jointly 
send common information to the destination. 

In the following, we define two classes of degraded GMACs 
with one confidential message set. 

Definition 5: The GMAC with one confidential message set 
is physically degraded if the transition probability distribution 
satisfies 

p(y, V2 \xi,x 2 ) = p(y\xi,x 2 )p(y 2 \y,x 2 ). (10) 

Definition 6: The GMAC with one confidential message set 
is stochastically degraded if its conditional marginal distribu- 
tion is the same as that of a physically degraded GMAC, i.e., 
there exists a distribution p(?/ 2 |y,2; 2 ) such that 

p(V2\xi,x 2 ) = ^2p(y\x 1 ,x 2 )p(y 2 \y,x 2 ). (11) 

y 

We note the following useful lemma. 

Lemma 1: The capacity-equivocation region of GMACs 
with confidential messages depends only on the marginal 
channel transition probability distributions p(y\x\,x 2 ), 
p{yi\xi,x 2 ), and p(y 2 \xi,x 2 ). 

Based on Lemma we have the following capacity- 
equivocation region for both physically and stochastically 
degraded GMACs with confidential messages. 

Theorem 4: For the degraded GMAC with one confidential 
message set, the capacity-equivocation region is given by 



*2 



u 



(12) 



p(q, x 2 )p(xi \q)p(y\xi,x 2 )p(y 2 \y, x 2 ) 
(Ro, Ri,R e ) : 
Ro > 0, Ri > 0, 
R 1 <I(X 1 ;Y\X 2 ,Q), 
R + R 1 <I(X 1 ,X 2 ;Y), 
< R e < Ri, 

Re < I(X i; Y\X 2 ,Q) - I(X i; Y 2 \X 2 ,Q), 
, Ro + Re < HX^X^Y) ~ I{X i; Y 2 \X 2 ,Q) _ 

where Q is bounded in cardinality by \Q\ < \Xi\ ■ \X 2 \ + 1. 

Remark 5: The region ffj can be shown to be convex, and 
hence does not need further convexification. 

The following secrecy capacity region and secrecy capacity 
(as a function of Ro) follow from Theorem @] 

Corollary 1: For the degraded GMAC with one confidential 
message set, the secrecy capacity region is given by 



r 1 - 



u 



P(q, x 2 )p(xi\q)p(y\x 1 ,x 2 )p(y 2 \y, x 2 ) 

(Ro,Ri)- (13) 
Ro > 0, Ri > 0, 

Ri <I(X 1 ;Y\X 2 ,Q)-I(X 1 ; Y 2 \X 2 ,Q), 
Ro + R 1 </(X 1 ,X 2 ;y)-7(X i; y 2 |X 2 ,Q) _ 

The secrecy capacity as a function of Ro is given by 

CljRo) = maxmin{/(X i; Y\X 2 , Q) - I(X r ,Y 2 \X 2 ,Q), 

I{X 1 ,X 2] Y) - I(Xi;Y 2 \X 2 ,Q) - R } 

(14) 



where the maximum is taken over all joint distributions 
p(q, x 2 )p(x 1 \q)p(y\x 1 ,x 2 )p(y 2 \y, x 2 ). In both O and (O, 
Q is bounded in cardinality by \Q\ < \Xi \ ■ \X 2 \ + 1. 

V. GMAC with Two Confidential Message Sets 

In this section, we consider the general case of the GMAC 
with confidential messages, where the two users have com- 
mon messages and each user has private (confidential) mes- 
sages intended for the destination. For this case, the rate- 
equivocation tuple has five components and takes the form 
(Ro, R 2 , Ri.e, R 2 . e ), where R\. e and R 2 e are equivoca- 
tion rates indicating the secrecy levels of confidential messages 
sent by user 1 and confidential messages sent by user 2, 
respectively. 

Theorem 5: The following convexified region of nonnega- 
tive rate-equivocation tuples is achievable for the GMAC with 
two confidential message sets: 



n 



Convex 

p(q)p(u\q)p{x 1 \u)p{v\q)p(x 2 \v) 

p{y,yi,y2\xi,x 2 ) 

(Rq, Ri, R 2 , Rl y e, R 2y e) '■ 
Ro > 0, Ri > 0, R 2 > 0, 
Ri<I(U;Y\V,Q), 
R 2 <I{V;Y\U,Q), 
Rx + R 2 <I(U,V;Y\Q), 
Ro + Ri+R 2 <I(U,V,Q;Y), 
R 2 ,e) £ S e (Ro, Ri, R 2 ) 



(15) 



where 

S e (Ro, Ri,R 2 ) 



u 



where C 



MAC 



(R[,R' 2 ) : (i?o,-R'i,-R 2 ) e c mc 
i?i < R'i , R 2 < R'2 

(Ro, i?l, e , R2,e) '■ 
< Rx.e < Rl 

Ri.e < [R[-I(U;Y 2 \X 2 ,V,Q)] + 
< R 2 . e < R 2 
. Ri,e < [R! 2 -I(V;Y 1 \X 1 ,U,Q)}+ 

is defined as 



(16) 



nV 

^MAC 



> ■ 



(17) 



(Ro, R\,R 2 ) : 
Ro >0,Ri> 0, R 2 > 0, 
Ri<I(U;Y\V,Q), 
R 2 <I(V;Y\U,Q), 
R1+R2 < I(U,V;Y\Q), 
R + Ri+R 2 < I(U, V, Q; Y) _ 
The region S e (Ro, Ri, R2) can be characterized by an 
explicit form with inequality bounds only. 

Theorem 6: The set S e (Ro,Ri,R 2 ) in ( fT6t can be ex- 
pressed in the following explicit form: 

S e (Ro, Ri, R2) 

= £i(i?o, R\,R2) u £ 2 (-Ro7 R\,R2) u £3(^0, R\,R2) 

(18) 
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where 

£i(i?o, Ri,R 2 ) 

(Rl,e, R2,e) 



where 



= < 



< R he <Ri, < R 2 , e < i?2 
Ri,e < \l(U; Y\V, Q) - I(U; Y 2 \X 2 ,V, Q)} + , 
Ri.e < [I(U,V;Y\Q) - R 2 - I{U;Y 2 \X 2 ,V,Q)}+, 
Rx,e < [I(U, V, Q; Y)-R - R 2 

-I(U;Y 2 \X 2 ,V,Q)} + 
R 2 ,e < [I{V;Y\U,Q) - I(V;Y 1 \X U U,Q)} + , 
R2.e < [I(U,V;Y\Q)-R 1 -I(V;Y 1 \X lt U,Q)]+, 
R2.e < [I(U, V, Q; Y)-Ro- Ri 

-I(V;Y 1 \X 1 ,U,Q)]+ 
R h e + R2,e < [I{U,V;Y\Q) - I{U;Y 2 \X 2 ,V,Q) 

-I(V;Y 1 \X 1 ,U,Q)]+, 
Ri.e + R 2 ,e < [I(U, V, Q; Y) - R 

-I(U;Y 2 \X 2 ,V,Q) - I(V;Y 1 \X 1 ,U,Q)}+ 



2 2 (Rq, Ri,R 2 ) 

{Rl,e, R2,e) '■ 

0<Rl,e<Rl, R2e=0 

Ri.e < [I(U; Y\V, Q) - I(U- Y 2 \X 2 ,V, Q)]+, 
Ri.e < [I(U,V;Y\Q)-R 2 -I(U;Y 2 \X 2 ,V,Q)]+, 
Ri.e < [I(U, V, Q; Y)-Rq- R 2 
-I(U;Y 2 \X 2 ,V,Q)]+ 

£>3{Ro, Ri,R 2 ) 

{Rl,ei R2,e) '■ 

Rl e = 0, < i?2,e R2 

R2.e < [I(V;Y\U,'Q) - I(V;Y 1 \X 1 ,U,Q)] + , 
R 2 ,e < [I(U, V; Y\Q) -lb- I(V; Y^Xu U, Q)] + , 
R2.e < [I(U, V, Q; Y) — Rq — R t 
-I(V;Y 1 \X 1 ,U,Q)} + 
Remark 6: The region Jl 5i reduces to the capacity region 
of the MAC [5] by removing the secrecy constraints (i?i !<2 = 
0, i? 2 ,e = 0) and setting U = X t and V = X 2 . 

Remark 7: The last two bounds in £,i(Rq, Ri,R 2 ) indicate 
that there is a trade-off between the two equivocation rates 
Ri t e and R 2 , e , i.e., the secrecy levels achieved for the two 
confidential message sets Wi and W 2 . 

We now study the case where confidential messages of each 
user are perfectly hidden from the other user. This happens 
when JJx.e = Ri an d R2.e = Rz- The rate region that contains 
all these rate tuples is called the secrecy capacity region and 
is given by 

C 1 / = {(i?o, Ri,R2) ■ (Ro, Ri,R2, Ri,R 2 ) & c if 11 }. (19) 

The following inner bound on the secrecy capacity region 
Cg 1 follows from Theorem [5] and Theorem [6] 

Corollary 2: An inner bound on secrecy capacity region for 
the GMAC with two confidential message sets is given by: 



K 
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Convex (J (n a ,i U K s , 2 U K s . 3 } 

p(q)p(u\q)p(xi\u) 
p(v\q)p(x 2 \v) 

p(y,yi,y 2 \xi,x 2 ) 



(Rq,Ri,R 2 ) ■ 

Ro > 0, i?i > 0,R 2 > 0, 

Ri <I{U;Y\V,Q)-I(U;Y 2 \V,X 2 ,Q), 

R 2 <I(V;Y\U,Q) - I{V;Y 1 \U,X 1 ,Q), 

Ri + R 2 < I(U,V;Y\Q) - I(U;Y 2 \V,X 2 ,Q) 

R + R 1 +R 2 < I(U, V, Q; Y) 

-I(U; Y 2 \V, X 2 ,Q) - I(V; Y t \U, X U Q) 

{Ro, Ri,R 2 ) ■ 

Ro >0,Ri> 0,i? 2 = 0, 

Ri<I(U;Y\V,Q)-I{U;Y 2 \V,X 2 ,Q), 

Ro + Ri<I{U,V,Q;Y)-I{U-Y 2 \V,X 2 ,Q) 



Tl s , 3 = 



(Rq,Ri,R 2 ) ■ 
Ro >0,Ri = 0,i? 2 > 0, 
R2 < I{V;Y\U,Q) - HViY^XuQ), 
Ro + R2<I(U,V,Q;Y)-I(V;Y 1 \U,X 1 ,Q) 

VI. Conclusions 

We have studied the capacity-equivocation region of the 
GMAC with confidential messages. For the GMAC with one 
confidential message set, we have derived inner and outer 
bounds on the capacity-equivocation region. Although the 
two bounds only match partially, they are tight enough to 
characterize the secrecy capacity region, where confidential 
messages sent by user 1 are perfectly hidden from user 2. For 
the degraded GMAC with one confidential message set, we 
have established the capacity-equivocation region. In [6], we 
have also studied two example GMACs with one confidential 
message set, the binary degraded GMAC and the Gaussian 
GMAC. 

We have further obtained an achievable rate-equivocation 
region (inner bound on the capacity-equivocation region) for 
the general case of the GMAC with two confidential message 
sets. We have shown that the achievable rate-equivocation 
region for the case of two confidential message sets carries 
a new feature of a trade-off between the two equivocation 
rates corresponding to the two confidential message sets sent 
by the two users. 
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